FinlandLaki eraiden tekoalyjarjestelmien valvonnasta, Act on the Supervision of Certain Artificial Intelligence Systems
Laki eraiden tekoalyjarjestelmien valvonnasta (1377/2025)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
In force 9 months, effective 1 January 2026.
An AI governance rule binding private bodies.
As of 6 September 2026.
What it requires
- Expect Traficom to serve as Finland's single point of contact for the EU AI Act and to coordinate with the sectoral market-surveillance authority for your sector.
- Expect a Sanctions Board operating in connection with Traficom, not Traficom itself, to decide any administrative fine against you for breaching the AI Act's prohibited-practices, high-risk-system, or transparency duties in Finland.
- Expect a fine of up to EUR 35,000,000 or 7 percent of worldwide annual turnover for violating the AI Act's prohibited-practices rules, up to EUR 15,000,000 or 3 percent for a high-risk-system or transparency violation, or up to EUR 7,500,000 or 1 percent for supplying incorrect or misleading information to a Finnish market-surveillance authority.
If you get it wrong
Criminal exposureNo
Penalty structure
Section 23 sets the ceiling at three tiers depending on which duty was violated. The highest tier, recorded here, is EUR 35,000,000 or 7 percent of an undertaking's total worldwide annual turnover for the preceding financial year, whichever is higher, for a fine under Section 21 for violating the AI Act's prohibited-practices rules. A middle tier of EUR 15,000,000 or 3 percent of turnover applies to a fine under Sections 14 to 19 (provider, agent, importer, distributor and deployer duties for a high-risk system) or Section 22 (transparency-obligation violations). A lower tier of EUR 7,500,000 or 1 percent of turnover applies to a fine under Section 20 for supplying incorrect, incomplete or misleading information. A micro, small or medium-sized enterprise's ceiling under any tier is instead the lower, not the higher, of the stated percentage or fixed amount.
- Rule
- Higher of
- As of
- 6 September 2026
- Currency
- EUR
- Fixed cap
- 35,000,000
- Turnover percentage cap
- 7
Who enforces it
Enforcement body
Traficom, the common contact point under AI Act Article 70, together with the sectoral market-surveillance authorities for high-risk systems in their own regulated domains, and a Sanctions Board that decides administrative fines.
What it reaches
How the hook was established
express
What makes it apply
Operator establishment, Market targeting, Place of effect
Obligation class
Governance
What it makes you log
Who may demand the log
Regulator, Auditor or notified body
Log retention
This is a Finland-established provider's or representative's own duty under Section 26 to keep the AI Act Article 18(1) technical documentation available to Finland's market surveillance and notifying authorities for ten years. Article 18(1) is the AI Act's own documentation duty; this Act states the ten-year figure again in its own words as the Finland-facing availability duty on a Finland-established provider or representative.
- Unit
- Years
- As of
- 22 September 2026
- Basis
- Fixed
- Minimum value
- 10
Logging duty
Section 20 lets the Sanctions Board fine an operator that intentionally or negligently gives incorrect, incomplete or misleading information in response to a request from a notified body or a market surveillance authority, which requires the operator to be able to give accurate information on demand. Section 26 separately requires a provider or a representative established in Finland to ensure the AI Act Article 18(1) technical documentation for a high-risk AI system stays available to the market surveillance and notifying authorities for ten years. Neither section itself names logs or records; both require producing or keeping something available on demand or over time, which makes each duty implicit rather than explicit.
- Kind
- Implicit
- As of
- 22 September 2026
- Provision
- 12 §, 20 § and 26 §
- Trigger
- all_systems
- high_risk_systems
Who checks it
Audit expectation
on_request
Who audits it
Regulator
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
The Act's administrative-fine mechanism, its main operative duty, reaches a provider, authorized representative, importer, distributor, or deployer of an AI system rather than a government body: Section 24 bars a fine against every named category of Finnish public authority. The Act supplements the EU AI Act within its Article 2 scope, but does not apply to the work of Parliament, the Parliamentary Ombudsman, or the Chancellor of Justice.
Section 6 designates Traficom (Transport- och kommunikationsverket) as the common contact point under AI Act Article 70, responsible for coordinating the authorities competent under this Act and reporting annually to the European Commission. Sections 3, 4, and 5 split market surveillance of high-risk AI systems, prohibited practices, and transparency obligations among named sectoral authorities.
Section 13 creates a Sanctions Board (Paafoljdsavgiftsnamnden) that decides an administrative fine under Sections 14 to 22 against a provider, authorized representative, importer, distributor, deployer, or notified body for breaching a duty under the AI Act.
Section 24 bars a fine against state authorities, state enterprises, municipal authorities, welfare regions, independent public-law institutions, parliamentary agencies, the Office of the President of the Republic, and the Evangelical Lutheran and Orthodox Churches in Finland and their parishes, against anyone already facing prosecution or a final conviction for the same act, and more than five years after the violation.
When LexLint raises it
high_risk_decisionsdeploys_chatbotgenerates_contentautomated_outreachprocesses_biometrics
Read the law
Finlex, official consolidated Swedish-language text of Laki eraiden tekoalyjarjestelmien valvonnasta (1377/2025)
no English translation is published
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.